CVE-2026-16240 | PostgreSQL up to 18.6 pg_basebackup format string

A vulnerability marked as problematic has been reported in PostgreSQL up to 14.24/15.19/16.15/17.11/18.6. The impacted element is an unknown function of the component pg_basebackup. Performing a manipulation results in format string.

This vulnerability is reported as CVE-2026-16240. The attack requires a local approach. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More